018992b2023fd2601771e797173fb774

General

Target

018992b2023fd2601771e797173fb774
Size

118KB
MD5

018992b2023fd2601771e797173fb774
SHA1

bc25e3d322b7d82eb50cae9eb57a3b0d1d9d7581
SHA256

1089529986cc4aacb045cc10030e38b7b3876f6b23e53998ee6118806ceba07d
SHA512

e9a1c1076f6f8ef8c4ebf65abc4ac8b251b4e3e8a1cb8b1ef2626acb085700724e7240e405b6ad8551ea28ec33228df832cb3b7efaf2f1793674fe165875cca6
SSDEEP

3072:dSKf2N9xxjcgjQFrUBX/7RVIc7BFNROGgN:8KfUjcOWrY/7jxK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
018992b2023fd2601771e797173fb774

Files

018992b2023fd2601771e797173fb774
.exe windows:5 windows x86 arch:x86

462f63682626cfc5c88f45cce550cbee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryW
DeleteFileW
CreateFileMappingA
InterlockedExchange
SetUnhandledExceptionFilter
GetStartupInfoA
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetLastError
TerminateProcess
GetModuleHandleA
VirtualAlloc
GetProcAddress
GetCurrentProcess
GetCurrentProcessId
QueryPerformanceCounter

advapi32

RegOpenKeyExA
RegOpenKeyExW
RegCloseKey
RegQueryValueExA
RegQueryValueExW
WmiMofEnumerateResourcesA

wsock32

GetAddressByNameA
GetNameByTypeA
sethostname
SetServiceA
GetTypeByNameA
dn_expand
WSARecvEx
GetServiceA
NPLoadNameSpaces
gethostbyname
TransmitFile
EnumProtocolsA

Sections

.textbss
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

462f63682626cfc5c88f45cce550cbee

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

wsock32

Sections

.textbss Size: - Virtual size: 108KB

.text Size: 55KB - Virtual size: 55KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 53KB - Virtual size: 53KB

.rsrc Size: 6KB - Virtual size: 6KB

.textbss
Size: - Virtual size: 108KB

.text
Size: 55KB - Virtual size: 55KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 53KB - Virtual size: 53KB

.rsrc
Size: 6KB - Virtual size: 6KB